I have an unlimited cPanel shared hosting account, which I stopped using since I moved on to VPS. I can still access the account, and kept the files undeleted as a backup. Since I have addons enabled, I though I can allow some other people to host their sites on my account (yes, I can run a shared hosting service using my VPS, but I try to keep it isolated and lightweight).
But the problem is, when I tried to access the cPanel of one of my existing addon domains, I was able to access the document root of my main site. This means if I setup an addon domain for somebody else, they might be able to access the main root also. How to prevent this from happening?